Version 6.9.1 • License Apache-2.0
One-Line Verdict
"Heavy install size detected. Review bloat risk."
Poor
Maintenance slowing down.
1 CVE History
Historical vulnerabilities found.
156.0 KB
Light footprint.
0
Niche adoption.
Package Payload
5 Direct
Clean dependency structure.
Cold-Start Impact
+2 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 1 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is log4js too heavy? Compare it with these industry standards:
"Port of Log4js to work with node."
log4js is used to facilitate high-performance Node.js workflows. It provides a slim footprint of 156.0 KB on disk.
# Install via NPM
npm install log4js
# Install via Yarn
yarn add log4js
You are currently viewing a proprietary security audit for log4js on PAudit. We aggregate global databases to provide a safety rating of 40/100.
Run npm install log4js. This installs version 6.9.1 and adds 5 direct dependencies to your project.
Yes, log4js records 0 weekly downloads, making it a Niche adoption. part of the ecosystem.